Microsoft ForeFront Endpoint Protection 2010

Prerequisites
http://technet.microsoft.com/en-ca/library/ff823830.aspx

You might get an error about Setup cannot verify the service principal name (SPN) for this account
- Elevate a command prompt and execute the following command.
setspn -A MSSQLSvc/<SQL Server Name>:1433 <domain>\<user>    <--SQL Service Account

Download Microsoft Forefront Endpoint Protection (FEP) 2010 Update Rolloup 1 Tools:
http://www.microsoft.com/download/en/details.aspx?id=26613

How to use the Definition Update Automation Tool for Forefront Endpoint Protection 2010 Update Rollup 1.
http://blogs.technet.com/b/clientsecurity/archive/2011/11/03/how-to-use-the-definition-update-automation-tool-for-forefront-endpoint-protection-2010-update-rollup-1.aspx

I personally like the "Status Filtering Rules Method" as it monitors the statemsg and as soon as the Wsus Sync Manager finished synchornising with Microsoft, it will kick off the batch file to update your deployment package and assignment..